| tiêu đề | Telerik Fiddler v5.0.20182.28034 Local Privilege Escalation |
|---|
| Mô tả | A vulnerability was found in Telerik Fiddler v5.0.20182.28034. The feature affected is Fiddler's Win8 Loopback Exemptions. The feature mentioned requires administrator privileges, leading to the potential impact of local privilege escalation because Fiddler's installation is placed in the AppData folder which can be accessed publicly. Since no integrity check of the executable happens during the life cycle of the process, replacing the EnableLoopback.exe from the AppData folder will allow privilege escalation once the Win8 Loopback Exemptions feature is ran. CVE-2019-12097 was assigned to the vulnerability. |
|---|
| Nguồn | ⚠️ https://www.telerik.com/download/fiddler |
|---|
| Người dùng | nathunandwani (UID 862) |
|---|
| Đệ trình | 28/05/2019 14:55 (cách đây 7 những năm) |
|---|
| Kiểm duyệt | 29/05/2019 13:35 (23 hours later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 135671 [Telerik Fiddler 5.0.20182.28034 Win8 Loopback Exemption nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|